Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: UBcDc8RZZjsGsPPfcpcnpxaffOmO0HptQ4SSeDZ+ags=
Subject key identifier: A9:22:DC:2D:4F:0C:E4:01:59:D2:21:E7:1B:81:42:5F:FC:C5:9E:91
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019A5262F08F90F10A5770068140A6089320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 05:00:07 +0000
Manifest this update: Wed 05 Nov 2025 05:00:07 +0000
Manifest next update: Thu 06 Nov 2025 05:00:07 +0000
Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: dlW1CG8pazPJJ/Wz+Kui+g0oJh1AW0nZQwpOPDpD95A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f0:8f:90:f1:0a:57:70:06:81:40:a6:08:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Nov 5 05:00:07 2025 GMT
Not After : Nov 6 05:00:07 2025 GMT
Subject: CN=a922dc2d4f0ce40159d221e71b81425ffcc59e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:26:28:24:68:84:c0:53:62:e7:e8:d8:bd:
09:b0:81:79:97:51:a4:7b:ce:30:ae:49:df:a0:c0:
25:06:22:4e:e1:33:45:88:08:bc:52:35:0d:67:64:
5c:f2:8b:bf:6d:2e:ce:4d:53:04:8c:66:8c:46:55:
7e:ca:54:9e:5f:ba:ef:97:b7:ed:43:62:d7:8b:57:
7e:f2:0c:3b:01:47:0e:48:9f:1d:a5:be:d8:0a:1e:
91:5c:6c:65:34:1b:f1:de:f5:77:5d:d7:0e:a6:f2:
81:c8:65:6e:fb:f4:54:81:48:84:5f:42:a6:07:73:
1c:c6:24:dd:48:7e:a8:4a:f3:27:a4:7c:e9:6f:eb:
5a:2f:17:e5:16:02:4c:63:7d:fa:39:a1:c4:7a:26:
d7:03:60:4b:ca:e5:a1:b0:dd:e7:5b:0e:a7:b3:91:
c6:4d:e8:1e:42:1b:4e:1f:15:f1:ac:68:2b:38:25:
de:b0:e8:25:68:04:b1:45:45:e0:c6:71:13:5b:79:
e7:a8:f9:b8:96:87:69:bc:c4:4c:f3:7a:d8:8f:3f:
31:ca:d2:b4:d5:15:ec:62:c0:75:7f:c5:a9:19:f0:
1b:fe:b2:d2:12:2f:76:b2:52:cb:53:fa:68:8b:b1:
32:15:04:22:e3:fc:55:ba:9f:60:4e:78:a5:89:29:
dc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:DC:2D:4F:0C:E4:01:59:D2:21:E7:1B:81:42:5F:FC:C5:9E:91
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8e:39:c6:9d:85:84:e3:e3:91:8c:7b:66:a9:4e:2f:10:6b:
4a:50:d5:df:09:55:1b:65:8a:dd:ac:f4:e2:9c:1e:8c:01:c8:
46:1d:77:a4:06:da:01:0d:69:5d:58:04:99:e6:8a:5e:de:df:
46:e7:c7:88:1a:39:d5:9f:58:2e:4d:5f:56:cf:78:12:09:d5:
c9:cd:4c:be:9b:01:92:8f:30:43:fa:be:26:f1:47:51:68:1e:
7e:f2:aa:bb:20:53:a0:97:3f:d9:73:fa:27:0a:aa:60:4d:10:
b0:6d:d4:85:b6:0b:38:61:5c:6d:f1:0e:aa:f8:f0:61:9c:8b:
15:c6:73:05:24:66:0a:c4:7a:02:ac:a1:76:d0:ac:ba:01:3f:
a5:e2:8a:79:e2:82:53:7f:22:af:32:2d:8f:72:8c:b9:2e:8e:
3f:a7:88:76:57:a3:4b:73:b0:58:10:1a:4e:2a:7b:c6:60:a4:
8a:fc:28:b9:30:8b:7f:fc:66:36:57:55:5f:65:d9:20:cd:c3:
8e:f4:d4:62:10:c5:a1:8d:ff:00:24:f1:ca:db:65:e5:24:14:
d1:79:4e:e9:9e:fb:6e:8f:92:a7:41:cf:d9:96:3d:47:1d:20:
c5:bb:0d:21:c7:70:87:e6:42:b3:84:31:04:c0:eb:9f:e2:cd:
c9:1d:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:27 2025 by rpki-client